AWS/GCP auth refresh commands run under a new process supervisor that kills the whole process tree on timeout, abort or shutdown

awsAuthRefresh and gcpAuthRefresh let you give Claude Code your own command for refreshing cloud credentials. These commands, and AWS credential-export commands like them, now run under a new supervisor. The supervisor enforces a 3-minute time limit and also reacts to cancellation and to Claude Code shutting down.

When it has to stop a command, it first ends the command's whole process tree, meaning the command plus any programs it started. On Windows this goes through PowerShell. Elsewhere it ends programs started in the same session. It then signals the command itself. It records why it stopped the command:

• timeout
• abort
• shutdown

The timeout message is now shown only when the reason really was a timeout. During shutdown, the AWS path prints no error and the GCP path skips its error output. If ending the tree fails, it logs "auth refresh: process-tree kill failed" and falls back to stopping just the command.